Lucene search
+L

4356 matches found

NVD
NVD
added 2025/12/15 9:15 p.m.11 views

CVE-2023-53871

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server...

9.8CVSS0.00624EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/15 8:28 p.m.7 views

CVE-2023-53871 Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server...

6.9CVSS7AI score0.00624EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/15 8:28 p.m.36 views

CVE-2023-53871 Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server...

6.9CVSS0.00624EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2025/12/12 12:00 a.m.185 views

📄 Drupal 11.x-dev Information Disclosure

Proof of concept script demonstrating a full path disclosure issue in Drupal version 11.x-dev. ============================================================================================================================================= | Title : Drupal 11.x-dev full Information Disclosure | |...

5.3CVSS6.9AI score0.09269EPSS
SaveExploits4
EUVD
EUVD
added 2025/12/11 6:30 p.m.11 views

EUVD-2025-202697

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS5.8AI score0.00167EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/11 3:19 p.m.74 views

CVE-2025-67739

JetBrains TeamCity is affected if running a version prior to 2025.11.2. The CVE-2025-67739 issue is caused by improper validation of repository URLs, which could allow disclosure of local file paths. The Nessus and vendor entries corroborate that older TeamCity builds are vulnerable to local path...

3.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/11 3:19 p.m.39 views

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 3:19 p.m.7 views

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.9 views

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

3.1CVSS6.3AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/10 9:16 p.m.11 views

CVE-2025-67461

External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access...

5.5CVSS5.8AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/13 3:15 p.m.14 views

CVE-2025-64739

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access...

7.5CVSS0.00316EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/11 12:00 a.m.7 views

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25041)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25041 advisory. - External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of...

7.5CVSS5.9AI score0.00316EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/11/10 12:00 a.m.348 views

VulnCheck KEV: CVE-2006-4837

Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 library/lib.php and 2 library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid...

7.5CVSS6.2AI score0.02809EPSS
SaveIn wildExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-1437

Malware in sbrugna...

5CVSS6.4AI score0.01716EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-1762

Malware in sbrugna...

7.5CVSS6.4AI score0.01909EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-6993

Malware in sbrugna...

5.3CVSS5.5AI score0.01591EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-3088

Malware in sbrugna...

5CVSS6.4AI score0.01759EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2004-1905

Malware in sbrugna...

5CVSS6.4AI score0.03514EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2006-2697

Malware in sbrugna...

7.8CVSS6.4AI score0.02082EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2004-1573

Malware in sbrugna...

5CVSS6.4AI score0.01181EPSS
SaveExploits0References3
Rows per page
Query Builder